to download - Secure Support - SafeNet

Chapter 2Installation7. If you are installing ProtectFile Premium (MS PKI) with certificates storedon a cryptographic token, which is determined by the Serial Number youentered in step 4, follow this procedure:Set up an Active Directory domain controller with Certificate Authority(CA) service configured to issue certificates stored on a cryptographictoken. To do this:‣ Run the Microsoft Management Console (MMC) and select File >Add/Remove Snap-in.‣ Select the Certificate Authority and the Certificate Template snapins.‣ Click Add for each one, click Finish, and then click OK.‣ Select the Certificate Templates item from the tree in the left windowpane.‣ Scroll down to Smartcard User template.‣ Right-click and select Duplicate Template.• Under the General tab, provide the new template name (forexample, Custom Smartcard User).• Verify that the Publish Certificate in Active Directory optionis selected.• Do not change the default value set under the RequestHandling tab (all CSPs).• Under the Subject Name tab, select the Build Info. FromActive Directory radio button. Clear the Include E-MailName in Subject Name and the E-Mail Name settings.• Under the Security tab, assign the Authenticated Users groupthe Enroll permission, otherwise only domain administratorswill be able to enroll with this template.• Click OK. The new template is created.‣ Select the Certification Authority item from the tree in the left pane.‣ In the tree at Certification Authority > [Your CA Name] >Certificate Templates, right-click on the panel on the right side andselect New > Certificate Template to Issue from the context menu.‣ Select the Certificate Template just copied and click OK.14 © SafeNet, Inc.